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CLAIM AMENDMENTS 

Claims 1 and 22-28 are pending, wherein claim 1 is currently amended herein, claims 2-21 
have been deleted and claims 22-28 are newly added. 



1 1. (Currently amended) A MAC (media access control) address-based communication 

2 restricting method using access vectors stored in address tables, wherein the access vectors indicate 

3 whether two nodes, corresponding to a MAC source address and a MAC destination address, may 

4 access each other, the method comprising the steps of: 

5 receiving packet data upon request of communication through at least one port of a plurality 

6 of ports of an Ethernet switch; 

7 reading a MAC destination address and a MAC source address included in the received 

8 packet data; 

9 detecting, in [[an]] the address table, access vectors corresponding to the MAC destination 

10 and source addresses; and 

i i denying access if the access vectors of the MAC destination and source addresses are not 

12 matched. 

i Claims 2 through 21 (canceled) 

1 22. (New) A packet switch communication method, comprising the steps of: 

2 receiving packet data upon request of communication through at least one port of a plurality 

3 of ports of said packet switch ; 
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4 reading a MAC (media access control) destination address and a MAC (media access control) 

5 source address included in said received packet data; 

6 determining whether said received MAC source address is stored in an address table having 

7 an access vector indicating whether allowance for access of client nodes is made or not, wherein each 

8 client node is identified by at least corresponding MAC address; 

9 when it is determined that said received MAC source address is stored in said address table, 

10 determining whether an access vector corresponding to said received MAC destination address is 
n matched with an access vector corresponding to said received MAC source address, wherein both 
12 of the access vectors are stored in said address table; 

n if the access vectors corresponding to said received MAC destination and source addresses 

14 are matched, transmitting said received packet data to a MAC destination address; and 

i 5 denying access if said access vectors of said received MAC destination and source addresses 

16 are not matched. 

1 23. (New) The method as set forth in claim 22, further comprising steps of : 

2 configuring an anti-hacker table comprising information pertaining to a plurality of the client 

3 nodes and a plurality of server nodes of a network, wherein each server node is identified by at least 

4 corresponding MAC address; 

5 when it is determined that said received MAC source address is not stored in said address 

6 table, determining whether information corresponding to said received MAC source address is stored 

7 in said anti-hacker table; and 

8 when it is determined that said received MAC source address is stored in said anti-hacker 
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9 table, modifying an access vector in said MAC source address to a security key, to thereby store the 

10 modified address in the said address table. 

1 24. (New) The method as set forth in claim 23 , further comprising steps of : 

2 adding a port number, corresponding to the port through which said packet data was received, 

3 to a storage area corresponding to said MAC source address received in said anti-hacker table. 

1 25. (New) A packet switch communication method, comprising the steps of : 

2 receiving packet data upon request of communication through at least one port of a plurality 

3 of ports of said packet switch; 

4 reading a MAC (media access control) destination address and a MAC (media access control) 

5 source address included in said received packet data; 

6 determining whether said received MAC source address is stored in an address table having 

7 an access vector indicating whether allowance for access of client nodes is made or not, wherein each 

8 client node is identified by at least corresponding MAC address; 

9 when it is determined that said received MAC source address is not stored in said address 

10 table determining whether information corresponding to said received MAC source address is stored 
i i in said anti-hacker table; and 

i 2 when it is determined that said received MAC source address is stored in an anti-hacker table, 

13 modifying an access vector in said MAC source address to a security key, to thereby store the 

14 modified address in the said address table, said anti-hacker table comprising information pertaining 

15 to a plurality of said client nodes and a plurality of server nodes of a network, wherein each server 
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16 node is identified by at least corresponding MAC address. 

1 26. (New) A MAC (media access control) address-based communication restricting packet 

2 switch comprising: 

3 a plurality of MAC ports; 

4 a data exchange for establishing paths of packet data between MAC ports 

5 a packet memory storing an address table having access vector indicating whether allowance 

6 for access of client nodes is made or not, wherein each client node is identified by at least 

7 corresponding MAC address; 

8 a transmission/reception controller controlling data exchange; 

9 wherein said transmission/reception controller reads a MAC destination address and a MAC 
i o source address included in said received packet data from MAC ports, transmits said received packet 

1 1 data to a MAC destination address when said received MAC source address is stored in said address 

12 table and if an access vector corresponding to said received MAC destination address is matched 

13 with an access vector corresponding to said received MAC source address, denies access if said 

14 access vectors of said received MAC destination and source addresses do not match. 

1 27. (New) A MAC address-based communication restricting packet switch communication 

2 method as set forth in claim 26, 

3 when said received MAC source address is not stored in the address table, and if information 

4 corresponding to the received MAC source address is stored in an anti hacker table, modifying an 

5 access vector in said MAC source address to a security key, to thereby store the modified address 
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in the said address table, wherein said anti-hacker table comprise information pertaining to a 
plurality of client nodes and a plurality of sever nodes, wherein each server node is identified by at 
least corresponding MAC address. 

28. (New) A MAC address-based communication restricting packet switch communication 
method as set forth in claim 27, wherein said transmission/reception controller adds a port number, 
corresponding to the MAC port through which said data packet was received, to a storage area 
corresponding to said received MAC source address in said anti-hacker table. 



